
$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier: DeTNDwXC5h/GIZSxIWz6HERAV+hc/5J7ZKZsuXXztRM=
Subject key identifier: 3F:2D:11:8E:6E:C4:6D:02:97:11:72:CA:30:7E:8E:6A:E8:F4:76:AF
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 5E5CEC80E6A51E7F41D26EF32AAB2ECD76FCEB6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number: 08A6
Signing time: Tue 12 May 2026 16:39:29 +0000
Manifest this update: Tue 12 May 2026 16:34:29 +0000
Manifest next update: Wed 13 May 2026 16:54:29 +0000
Files and hashes: 1: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=)
2: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
3: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
4: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=)
5: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
6: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=)
7: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
8: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
9: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
10: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=)
11: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 2QGZjRBIGZkQB/spf1kF6xH43n/zN07OFcFnHPxFCnM=)
12: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
13: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5c:ec:80:e6:a5:1e:7f:41:d2:6e:f3:2a:ab:2e:cd:76:fc:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: May 12 16:34:29 2026 GMT
Not After : May 13 16:54:29 2026 GMT
Subject: CN=3F2D118E6EC46D02971172CA307E8E6AE8F476AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:ec:b7:2c:fa:7f:57:5d:a9:d9:28:05:5a:
05:7c:2b:ee:cb:1d:90:f1:7d:0f:c5:bb:da:7c:ce:
00:6c:ff:8b:39:9b:da:25:2c:39:73:0e:b2:cd:2d:
d3:78:a2:24:aa:95:9f:6b:0c:e9:bd:5c:43:a1:91:
4f:6f:ae:27:6d:e5:68:8f:43:23:8f:77:99:e7:79:
e8:37:25:72:d0:07:0b:7a:03:92:bf:82:63:e9:9d:
82:f6:6a:b0:fc:66:b2:15:99:56:46:8f:33:07:41:
a2:e2:6b:e2:d1:ea:55:b9:c4:ed:e6:fa:94:c4:20:
cf:78:66:5c:af:c8:aa:3a:94:0d:d8:65:e2:10:14:
d0:9a:e9:d5:0d:d1:af:de:c3:87:bb:40:56:bf:1a:
ae:9f:c2:9f:e7:15:84:b8:c5:f8:fe:11:56:ac:59:
46:ae:39:ce:9f:32:47:17:f5:9f:f5:52:94:7e:81:
a8:73:e5:19:96:9f:d0:b4:96:39:3a:d7:1d:d2:d7:
de:e2:b1:b4:05:25:47:81:9f:70:45:72:19:0d:6e:
cc:c6:af:70:d6:52:1c:95:0b:50:dd:6d:83:82:38:
3e:cc:57:12:01:54:20:6e:4a:e7:84:a6:09:d9:3b:
9c:31:0a:0c:b3:69:ed:63:e3:5e:05:b9:24:4c:de:
13:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:11:8E:6E:C4:6D:02:97:11:72:CA:30:7E:8E:6A:E8:F4:76:AF
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cf:e3:f7:5a:fd:78:60:9c:88:ef:fe:37:07:3b:6d:91:d9:
15:b4:51:db:fe:ee:e4:b1:e2:f6:7b:9f:4b:cd:58:bb:f5:36:
71:45:a2:36:5c:88:2e:85:08:1a:46:2a:8c:df:2c:66:d4:60:
a9:fb:f0:8f:df:f1:94:c8:5f:01:d0:68:5a:97:cb:f0:61:2d:
45:88:c7:ae:53:24:c8:39:62:15:4c:de:8b:37:34:7b:c1:20:
0b:af:23:d8:f4:45:4a:8c:46:ac:0e:32:51:fc:8a:ad:fe:02:
04:e0:27:26:c2:0b:78:56:41:8d:50:bb:e3:78:1f:cc:7c:ab:
67:37:10:83:ba:53:98:47:5e:b0:18:00:eb:c4:07:e1:fa:a2:
a1:94:cb:52:bd:06:65:32:81:9f:ee:a1:27:c9:a1:e0:5f:cb:
66:cc:94:cd:e7:a2:1c:eb:5d:50:fb:01:d0:60:4c:33:5c:e0:
61:7b:f6:78:06:02:ad:04:98:a9:36:1e:68:d4:f2:71:1b:36:
2c:18:d3:9c:8d:77:7a:b8:18:e8:2f:95:36:10:c7:59:a2:f2:
a2:0b:9a:96:02:d7:a2:2e:08:8f:07:80:42:bb:71:92:3e:e8:
1a:45:fc:dc:35:5e:c1:4a:a1:67:1c:7e:ea:ce:b4:14:b1:16:
39:0d:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:05:50 2026 by rpki-client